CLSA-2026-1791213084 TuxCare security update for org.springframework (25 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1...

CLSA-2026-1791208774 TuxCare security update for image-size (2 CVEs)

TuxCare rebuilt image-size to address 2 CVEs. Fixed in 2.0.2-tuxcare.1...

CLSA-2026-1791208360 TuxCare security update for nanoid (1 CVE)

TuxCare rebuilt nanoid to address 1 CVE. Fixed in 5.1.5-tuxcare.1...

SUSE-SU-2026:4494-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2026-78807: Security bypass via missing PMKSA validation bsc1280914. - Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd...

CLSA-2026-1791205000 TuxCare security update for commons-configuration:commons-configuration (1 CVE)

TuxCare rebuilt commons-configuration:commons-configuration to address 1 CVE. Fixed in 1.10-tuxcare.3...

CLSA-2026-1791202982 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 15 @angular packages to address 1 CVE. Fixed in 19.2.25-tuxcare.6...

ROOT-APP-MAVEN-CVE-2026-41855 CVE-2026-41855 in org.springframework:spring-jms - Patched by Root

Root has patched CVE-2026-41855 in the org.springframework:spring-jms package for Root:Maven. Multiple fixed versions available...

DEBIAN-CVE-2026-63270

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

CLSA-2026-1791202437 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 14 @angular packages to address 1 CVE. Fixed in 19.2.14-tuxcare.4...

CLSA-2026-1791201412 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.8-tuxcare.1...

CLSA-2026-1791201400 TuxCare security update for h3 (1 CVE)

TuxCare rebuilt h3 to address 1 CVE. Fixed in 1.15.11-tuxcare.1...

CLSA-2026-1791201398 TuxCare security update for shell-quote (2 CVEs)

TuxCare rebuilt shell-quote to address 2 CVEs. Fixed in 1.8.1-tuxcare.2...

Astra Linux – Vulnerability in TIF format

A vulnerability was discovered in libtiff due to multiple potential integer overflows in the raw2tiff.c file. This flaw allows remote attackers to cause a denial of service or potentially execute arbitrary code through a crafted TIF image, triggering a heap-based buffer overflow...

Astra Linux – Vulnerability in NTP

In the mstolfp.c file within NTP 4.2.8p15, there is a buffer overflow vulnerability when a \0' character is added. An adversary may be able to attack a client ntpq process, but they cannot attack the ntpd process...

Astra Linux – Vulnerability in Twisted

In words.protocols.jabber.xmlstream in Twisted through version 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to intercept connections...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which may result in code execution. An attacker can provide malicious input to trigger an...

Astra Linux – Vulnerability in libpcap

The sf-pcapng.c file in libpcap before version 1.9.1 does not properly validate the PHB header length before allocating memory...

Astra Linux – Vulnerability in libjackson-json-java

A flaw was discovered in the org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities, similar to CVE-2016-3720, also affect the codehaus jackson-mapper-asl libraries, but in different classes...

Astra Linux – Vulnerability in liblivemedia

In liveMedia/FramedSource.cpp within Live555, up to version 1.08, an assertion failure can occur, leading to an application exit through multiple SETUP and PLAY commands...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...